A change to the usual Necurs rubbish, this fake order has a malformed .z archive file which contains a malicious executable with an icon to make it look like an Office document.
Reply-To: [email protected]: Recipients [DY]Date: 24 October 2017 at 06:48Subject: FW: Order acknowledgement for BEPO/N1/380006006(2)Dear All,Kindly find the attached Purchase order# IT/
Article Link: http://blog.dynamoo.com/2017/10/malware-spam-order-acknowledgement-for.html